Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS142655.roa
File: AS142655.roa (raw, json)
Hash identifier: bN9W9bB4DVVrc75qg+CSC4Pqc5R2sRoMkugmvOQze1c=
Subject key identifier: CF:90:2D:AF:B1:84:35:7E:77:17:B7:C3:23:DD:44:06:5F:A6:36:82
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 49C10986A1E48F16975FF45D0A82EFB57B81621F
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS142655.roa
Signing time: Fri 22 May 2026 04:27:04 +0000
ROA not before: Fri 22 May 2026 04:22:04 +0000
ROA not after: Fri 21 May 2027 04:27:04 +0000
asID: 142655
IP address blocks: 240a:a005::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
49:c1:09:86:a1:e4:8f:16:97:5f:f4:5d:0a:82:ef:b5:7b:81:62:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 04:22:04 2026 GMT
Not After : May 21 04:27:04 2027 GMT
Subject: CN=CF902DAFB184357E7717B7C323DD44065FA63682
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:9f:ef:8a:0b:64:01:ed:d3:37:be:12:ac:ff:
45:2d:56:24:7e:a9:0b:b0:d1:ed:96:81:62:ec:58:
3e:e1:00:d8:e7:76:dc:70:23:30:7d:18:79:ed:60:
cf:af:45:9a:34:7b:d0:40:85:c9:e4:ec:dd:b6:6f:
c9:76:61:51:d9:a0:ed:89:4c:bf:12:2e:cf:b5:cc:
e6:cd:b9:04:1a:ab:87:fd:91:44:58:98:a5:fa:97:
cb:a5:39:54:1b:47:42:42:e1:85:83:63:17:f5:05:
14:09:5e:8e:92:50:38:aa:1c:07:ab:38:88:73:a7:
3d:1b:2a:44:d6:15:b5:10:55:6b:35:89:cd:97:a3:
2d:bb:bd:cf:45:f9:7f:4a:d7:94:82:89:30:9d:c1:
28:c0:36:9c:b2:ff:58:61:45:f5:15:9b:7a:50:8f:
5a:d1:6b:1d:2b:39:90:f1:ad:a4:59:fe:e0:6a:5e:
b3:bf:55:6f:bd:9b:30:7b:5d:35:d8:cb:9b:8b:78:
71:d4:0b:b7:07:17:d5:f6:88:f7:8c:3e:4c:ae:a2:
91:c5:19:75:f2:3e:ae:dc:bb:c9:9d:5b:4e:37:24:
dd:24:de:11:c0:10:68:8b:a3:28:31:e0:93:27:b3:
bc:3b:87:4d:cc:ca:c0:43:8f:24:b1:d5:56:8f:f2:
c9:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:90:2D:AF:B1:84:35:7E:77:17:B7:C3:23:DD:44:06:5F:A6:36:82
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS142655.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a005::/32
Signature Algorithm: sha256WithRSAEncryption
1e:0e:47:74:d3:2b:1d:99:09:cd:2e:33:20:7c:3a:5f:42:6e:
b4:55:1a:13:cd:1f:82:c9:54:68:72:84:b5:12:68:b3:6b:4b:
60:82:c5:4a:8f:a7:93:67:b6:f7:9f:b1:2d:88:20:01:e0:59:
ac:ce:ba:37:c9:3c:4f:b3:7f:db:e8:87:8c:68:4a:39:02:4f:
fb:ce:7a:2d:4f:d8:0d:c1:63:89:99:a6:93:39:d3:a4:f2:54:
aa:b3:03:61:98:63:27:d4:63:56:58:43:1b:16:4a:93:ed:d7:
2e:57:e6:65:2c:3c:88:4d:9a:5c:c0:d1:08:31:c9:23:54:fc:
7a:86:97:07:22:fd:9e:90:26:1f:80:bf:fc:b5:1b:1a:a6:c7:
58:b5:a2:f3:c0:30:0e:68:d0:c0:18:c6:ea:6a:fe:0b:32:31:
f7:63:58:b3:8a:ac:76:9a:e3:72:58:b3:92:fc:c1:3f:9c:d6:
40:49:34:43:9f:c7:fa:33:c6:ae:ab:90:f9:95:c5:55:9f:ea:
92:ee:af:2a:ba:4c:46:42:c8:73:09:64:58:73:a8:53:8b:4d:
f5:6f:a5:3c:2e:6f:6c:f2:d2:2b:d8:7a:ac:1b:c1:6c:6c:ae:
22:9c:61:15:ee:3d:10:45:c7:3e:2c:3e:aa:77:99:63:07:4e:
f1:a2:47:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:41:48 2026 by rpki-client